Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File: ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier: TXEQk8MNRSqvTxfJNZp3ch4ke/2s0tKF2D1TPfsLsm0=
Subject key identifier: 84:88:C0:1D:BB:87:5A:1F:05:3E:F8:B7:9B:77:00:88:B5:ED:11:0A
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 019F130A611BBA1854F4A6F6075C60E2B814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number: 198D
Signing time: Mon 29 Jun 2026 11:01:15 +0000
Manifest this update: Mon 29 Jun 2026 11:01:15 +0000
Manifest next update: Tue 30 Jun 2026 11:01:15 +0000
Files and hashes: 1: 0z9citdXF8752nMEZiQ4oSMIADQ.roa (hash: JsB61vUCFnFWtGQaFlnVeeC8gXBCxefSLsjNjYyY9/g=)
2: 1QDofdrdxn1wg6XblVl9BvBWUmc.roa (hash: 8Sto9TSm0VzEJfpih+W00AHEzAW1aUXacQ7edZT+jK8=)
3: SHKEVaNgH9Bucka6k6DYJtipntE.roa (hash: BUtzhRgSiAPbFwNwynYtm2FzNHzBaqAfRxGfLRS/A6M=)
4: SiLSIEYAwNCN6yfvfGLloC6RIXg.roa (hash: f37/jtR+gmt7ksn8/WXr+fSg16YuTdrSXAgeLfyiBrs=)
5: VHWtEL_iyyJZZOqjrL2J-IKargg.roa (hash: rnSeZqJKS3ZOhG3KIGaYj7ByHskvac+xvOyX10SyZy8=)
6: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: R6CZNuO83SZtc/uWOAdvMLX0OtZSPsJqZ3Y9m2fz2xI=)
7: mYZ-CoJ30ryRjfCq_ZwrN2mkqqU.roa (hash: yzaoDw2vJVnlrfgQa+Wm4W0pkL/1ud5VYXRkIehmaa4=)
8: qBMQ_OTzlhMPTgYD0x98v7ieh-M.roa (hash: srAfkImn91GUj6UJibeFHF6TEzTA92kUfQ1mQv9UhIQ=)
9: vivzNK4w1TVYnua5SgoJCXmDNng.roa (hash: 9/40NjL27IpJKJ6tBTmAIkD9cPnZOn2LOM7782cQFOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:0a:61:1b:ba:18:54:f4:a6:f6:07:5c:60:e2:b8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jun 29 11:01:15 2026 GMT
Not After : Jun 30 11:01:15 2026 GMT
Subject: CN=8488c01dbb875a1f053ef8b79b770088b5ed110a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:a5:01:69:8d:7a:c4:ac:47:ad:d6:4b:01:
cb:33:37:6a:79:ae:4b:7c:fd:8c:11:0e:f1:b9:f5:
58:98:9d:b3:30:2c:96:18:d9:de:d9:b6:46:91:21:
ce:3d:a9:cd:aa:97:00:12:34:03:9a:bc:33:be:97:
e5:03:22:7d:10:1c:fc:e2:96:bb:fb:a8:f9:cf:90:
fc:3a:18:eb:a4:82:70:7c:28:3f:20:71:7f:0c:ec:
42:3f:a3:00:7d:6e:c9:9c:64:61:fc:cf:d3:11:97:
26:6b:90:98:43:39:5e:66:87:5a:29:cb:94:5c:14:
cd:ff:77:b9:51:b6:ee:c8:57:9f:db:66:16:6f:7e:
aa:3c:2e:8f:f5:99:54:d9:e0:5b:06:66:57:9c:46:
61:5e:4d:23:b5:26:57:0e:9a:86:c1:41:4f:a1:f0:
40:d2:8f:0f:7c:58:0d:f1:ab:4a:4a:29:0c:98:12:
01:3d:7b:96:e7:9f:40:bf:95:b5:8d:70:c3:35:4f:
a4:58:89:99:95:c3:aa:6c:cc:8a:c5:09:23:69:2f:
d2:66:b7:4d:d6:af:07:87:45:b8:9a:e2:de:2a:c1:
70:3e:93:12:30:d4:5b:52:6b:06:df:7e:e7:7e:2d:
e8:36:91:ec:f5:32:ec:57:09:1f:52:41:5d:46:7a:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:88:C0:1D:BB:87:5A:1F:05:3E:F8:B7:9B:77:00:88:B5:ED:11:0A
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:39:4c:1e:d8:79:28:5c:ba:61:89:d1:0f:f5:5c:1d:f1:ad:
df:27:f9:b6:8a:b3:42:b7:4d:b6:ae:3c:b0:99:49:55:d0:a7:
26:1f:1b:37:93:16:09:31:78:03:ff:ac:c9:9d:7c:f4:c3:5e:
f8:77:3a:53:a8:4d:b5:b3:f7:96:f0:01:ac:6c:18:e1:7d:5f:
54:06:94:4e:18:0b:58:72:e8:1e:30:14:fe:e8:5a:00:ef:78:
73:80:93:64:97:2e:c2:57:7a:75:38:e0:25:e4:d0:87:83:7f:
a8:65:85:e1:d4:36:d7:d5:de:53:fc:db:2e:fa:45:23:4b:95:
20:00:c6:bc:a4:e4:f3:1b:c8:b1:7f:fb:7e:84:65:0e:b2:2f:
83:8d:ed:fb:80:85:77:d0:b1:09:f4:15:b9:f3:17:9f:66:b5:
7e:7c:20:90:a3:cc:f0:89:8a:28:9b:39:7c:0b:07:cb:1c:92:
2a:59:4d:47:99:36:02:70:3a:d0:9d:86:df:6e:c4:9c:80:3f:
3f:c0:a5:d7:6b:11:c7:6b:48:ce:21:9a:44:64:d7:1f:5f:5d:
a3:f4:b2:d1:84:1d:fd:58:3d:63:9b:c6:03:f4:6f:64:29:93:
4f:93:4c:c1:33:f7:f6:3d:66:51:1e:00:35:ec:c3:76:60:88:
33:9f:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:42:45 2026 by rpki-client